Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3625A15/92C3CE082ECD11E980230320F8AEA228/6F1DB8E692A611EEAD363E72D25BE465.roa
File: 6F1DB8E692A611EEAD363E72D25BE465.roa (raw, json)
Hash identifier: U9BUtJsAMRe8LhMXpRX7x5DD1wtXY7iOI00OaJrVYBU=
Subject key identifier: 05:A7:9D:79:85:38:3D:DD:FA:57:E9:28:84:EB:D9:51:FA:B2:14:89
Certificate issuer: /CN=F3625A15AF/serialNumber=08D2C54E7B51CBC73434DD00605145122F1ACB67
Certificate serial: 0706
Authority key identifier: 08:D2:C5:4E:7B:51:CB:C7:34:34:DD:00:60:51:45:12:2F:1A:CB:67
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CNLFTntRy8c0NN0AYFFFEi8ay2c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3625A15/92C3CE082ECD11E980230320F8AEA228/6F1DB8E692A611EEAD363E72D25BE465.roa
Signing time: Mon 04 Dec 2023 13:10:02 +0000
ROA not before: Mon 04 Dec 2023 13:09:59 +0000
ROA not after: Wed 31 May 2034 13:09:59 +0000
asID: 328434
IP address blocks: 2c0f:ecd8::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3625A15/92C3CE082ECD11E980230320F8AEA228/CNLFTntRy8c0NN0AYFFFEi8ay2c.crl
rsync://rpki.afrinic.net/repository/member_repository/F3625A15/92C3CE082ECD11E980230320F8AEA228/CNLFTntRy8c0NN0AYFFFEi8ay2c.mft
rsync://rpki.afrinic.net/repository/afrinic/CNLFTntRy8c0NN0AYFFFEi8ay2c.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 12 May 2024 00:04:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1798 (0x706)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3625A15AF/serialNumber=08D2C54E7B51CBC73434DD00605145122F1ACB67
Validity
Not Before: Dec 4 13:09:59 2023 GMT
Not After : May 31 13:09:59 2034 GMT
Subject: CN=656dcfaa-66d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:6e:3b:49:70:55:a5:6e:01:ad:76:cd:7c:84:
28:26:79:32:30:6e:6d:0c:c2:9a:a7:c1:3a:a6:f6:
37:61:67:43:aa:37:88:f9:ee:e2:56:a3:9b:e6:e7:
8f:51:b6:27:86:98:e3:bf:88:86:b7:05:60:6c:1e:
5c:13:4b:97:d5:5b:a7:59:8a:91:78:3b:d1:5d:c2:
dc:68:6f:1e:c6:6a:36:73:15:8b:a6:a8:49:58:67:
1b:39:df:c1:98:27:a2:ba:bc:a0:2a:84:05:9e:fe:
d2:0a:a3:d3:6f:2d:8b:9a:6c:dd:07:a2:85:45:0c:
d7:4d:a1:8c:b8:a8:89:c0:80:04:20:eb:dd:2c:c7:
1b:33:87:1a:59:82:c7:17:1b:13:d3:a3:33:a8:7e:
94:ee:ad:91:bc:8b:11:1e:8f:72:38:4c:3e:6d:5a:
74:41:82:89:ca:87:a5:77:73:b5:09:ee:d3:8c:4c:
dd:76:09:75:4d:a6:24:f9:c7:58:32:0c:61:26:6e:
c2:36:54:33:09:d9:13:b2:d7:bc:ea:1d:33:3a:34:
3d:a9:29:cc:b4:d9:6d:08:dd:57:8a:ea:f0:5e:7a:
96:bc:eb:0a:c3:d3:57:35:48:3c:95:97:a9:5b:22:
99:b0:2a:bc:51:81:ae:f5:66:79:b8:5e:c4:3b:1e:
44:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:A7:9D:79:85:38:3D:DD:FA:57:E9:28:84:EB:D9:51:FA:B2:14:89
X509v3 Authority Key Identifier:
keyid:08:D2:C5:4E:7B:51:CB:C7:34:34:DD:00:60:51:45:12:2F:1A:CB:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3625A15/92C3CE082ECD11E980230320F8AEA228/CNLFTntRy8c0NN0AYFFFEi8ay2c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CNLFTntRy8c0NN0AYFFFEi8ay2c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625A15/92C3CE082ECD11E980230320F8AEA228/6F1DB8E692A611EEAD363E72D25BE465.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:ecd8::/32
Signature Algorithm: sha256WithRSAEncryption
24:74:f7:f7:6d:d9:00:e6:18:e1:01:63:02:9a:62:9a:3c:7f:
ee:f5:58:70:98:40:06:40:1a:7c:47:08:58:a3:8b:82:fd:03:
02:44:eb:f4:96:c7:9d:b0:25:49:5e:bf:51:e5:15:f7:f4:9f:
72:a4:12:19:99:c0:44:06:ab:ca:32:ab:3b:9c:c9:7f:e8:de:
df:64:bb:c2:40:ad:57:2a:db:60:15:53:7c:0c:ba:99:ba:c7:
1d:35:c2:be:97:92:bd:62:a4:62:b7:d6:5f:f8:7a:3d:00:ff:
b9:1e:36:82:73:1e:76:3c:9a:ef:5f:64:56:47:e3:3e:42:50:
f6:a1:ae:08:65:fa:17:8a:11:72:5a:8e:70:0c:47:36:eb:ed:
da:ef:c7:72:47:e0:51:23:ca:ef:d6:d6:d5:1e:96:a3:18:50:
c9:8d:67:11:e2:21:c8:e2:cf:66:4c:53:d8:20:06:d1:50:07:
fd:e8:1f:e8:ca:d4:f6:2b:cb:79:ba:b8:20:a7:4b:23:48:8b:
14:7b:a3:8a:6f:69:22:e1:5d:5c:36:c1:40:6b:cc:f8:c4:bd:
da:c9:04:3c:aa:9d:65:3c:91:a0:c9:ed:2b:a3:b5:3e:89:bc:
15:84:54:06:00:07:bb:dd:6d:46:bd:a6:7e:77:c5:37:f1:8e:
7c:31:f4:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 03:23:22 2024 by rpki-client on console-fra.rpki-client.org